Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/WsvzfCfU6jG3w3_0xCPCTpmXn44.roa
File:                     WsvzfCfU6jG3w3_0xCPCTpmXn44.roa (raw, json)
Hash identifier:          gHQ6zKzu8ZgKa2pYsaD8XDDmwlEypxaPJbDoFU0GGs8=
Subject key identifier:   5A:CB:F3:7C:27:D4:EA:31:B7:C3:7F:F4:C4:23:C2:4E:99:97:9F:8E
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       018CC348D0D33C9A9510AF429E5BDB92C330
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/WsvzfCfU6jG3w3_0xCPCTpmXn44.roa
Signing time:             Mon 01 Jan 2024 04:29:38 +0000
ROA not before:           Mon 01 Jan 2024 04:29:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44605
IP address blocks:        93.113.132.0/23 maxlen: 23
                          2a03:9c20:2000::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:d0:d3:3c:9a:95:10:af:42:9e:5b:db:92:c3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jan  1 04:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5acbf37c27d4ea31b7c37ff4c423c24e99979f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:52:57:2b:42:8e:bf:bd:02:5c:6b:83:6f:
                    f4:75:28:8a:3f:8e:7c:07:32:25:91:37:50:df:a1:
                    34:2c:1b:5a:0e:05:29:fc:51:22:db:4e:d7:45:c2:
                    dc:03:d9:09:89:b6:fa:7f:8f:7f:56:77:2a:d7:52:
                    ce:fc:22:74:c9:4e:88:a6:99:09:45:a9:4e:da:56:
                    b3:59:1b:42:93:da:1b:d9:34:6c:b3:4e:25:0b:e1:
                    a0:3b:32:ee:78:4c:90:b5:74:26:59:19:e7:ae:28:
                    f2:52:d6:3d:86:08:d2:5e:b0:f3:47:2e:4e:ab:b1:
                    8b:6f:be:58:b1:85:d9:bb:ed:a9:55:e8:4e:ad:9d:
                    7a:df:bb:90:45:f5:ff:19:dd:9b:06:41:1e:90:c5:
                    9e:68:9b:a1:09:72:63:df:ba:20:06:b8:ad:56:73:
                    cb:81:48:d1:fd:39:e7:40:65:6b:df:78:72:41:c8:
                    8d:72:20:6f:30:cf:91:ed:17:1e:40:b7:03:87:7c:
                    67:af:67:60:5b:fa:58:cc:27:e0:4c:f4:c1:ef:a7:
                    79:ed:19:8a:a9:85:36:f9:ad:4e:f0:77:f8:9c:ef:
                    c4:f2:bc:ec:08:83:b8:49:6f:7b:c8:9d:47:c7:d6:
                    c1:f8:5a:68:29:0a:55:ec:20:6e:cf:f6:c5:54:48:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:F3:7C:27:D4:EA:31:B7:C3:7F:F4:C4:23:C2:4E:99:97:9F:8E
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/WsvzfCfU6jG3w3_0xCPCTpmXn44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.132.0/23
                IPv6:
                  2a03:9c20:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:e4:81:c1:9f:32:d6:db:6f:dc:61:5d:a3:b0:77:a8:9e:
         eb:5e:86:5e:c4:2f:56:d5:48:94:ed:8e:c7:ae:84:79:54:d5:
         4b:58:60:71:f6:73:50:16:9f:15:a4:0a:f1:8b:94:4a:3f:37:
         6d:4e:2e:00:07:ae:a1:80:3c:94:35:42:f5:b8:4e:27:3b:69:
         a7:6e:3e:f2:66:f9:39:d4:43:93:b8:87:bd:f1:90:0d:68:da:
         dc:2b:2f:62:83:80:e9:8f:35:31:1e:58:35:e4:ff:78:cc:d8:
         2b:13:7e:4f:a9:a0:ef:09:38:c0:15:02:de:a3:4f:5a:9d:62:
         2f:94:07:1d:4b:5c:1d:25:ee:75:a7:ca:ec:57:19:98:e8:f4:
         8b:03:58:cb:60:0e:f0:96:84:78:e8:39:e8:62:1b:9c:a9:19:
         1b:cf:b9:50:5b:5e:45:76:05:dc:ee:04:20:6d:2c:bf:60:47:
         a1:db:98:7f:5c:12:40:ab:61:c4:fa:ce:2b:94:a3:73:a0:77:
         e2:2a:33:4f:75:46:1f:e0:94:35:56:f3:ff:71:14:cb:ec:68:
         ed:d3:a2:fb:7a:fe:07:78:91:6b:2b:55:74:80:c8:89:6e:c2:
         cb:96:cd:81:a1:a9:61:b4:3d:cd:23:d9:ae:f0:b5:df:68:fe:
         e9:fa:6a:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzDSNDTPJqVEK9CnlvbksMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjQwMTAxMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWNiZjM3YzI3ZDRlYTMxYjdjMzdmZjRjNDIzYzI0ZTk5OTc5ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzdSVytCjr+9Alxrg2/0dSiKP458
BzIlkTdQ36E0LBtaDgUp/FEi207XRcLcA9kJibb6f49/Vncq11LO/CJ0yU6IppkJ
RalO2lazWRtCk9ob2TRss04lC+GgOzLueEyQtXQmWRnnrijyUtY9hgjSXrDzRy5O
q7GLb75YsYXZu+2pVehOrZ1637uQRfX/Gd2bBkEekMWeaJuhCXJj37ogBritVnPL
gUjR/TnnQGVr33hyQciNciBvMM+R7RceQLcDh3xnr2dgW/pYzCfgTPTB76d57RmK
qYU2+a1O8Hf4nO/E8rzsCIO4SW97yJ1Hx9bB+FpoKQpV7CBuz/bFVEiKFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFrL83wn1Ooxt8N/9MQjwk6Zl5+OMB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvV3N2emZDZlU2akczdzNfMHhDUENUcG1YbjQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBXXGEMA8E
AgACMAkDBwAqA5wgIAAwDQYJKoZIhvcNAQELBQADggEBAKS45IHBnzLW22/cYV2j
sHeonutehl7EL1bVSJTtjseuhHlU1UtYYHH2c1AWnxWkCvGLlEo/N21OLgAHrqGA
PJQ1QvW4Tic7aaduPvJm+TnUQ5O4h73xkA1o2twrL2KDgOmPNTEeWDXk/3jM2CsT
fk+poO8JOMAVAt6jT1qdYi+UBx1LXB0l7nWnyuxXGZjo9IsDWMtgDvCWhHjoOehi
G5ypGRvPuVBbXkV2BdzuBCBtLL9gR6HbmH9cEkCrYcT6ziuUo3Ogd+IqM091Rh/g
lDVW8/9xFMvsaO3Tovt6/gd4kWsrVXSAyIluwsuWzYGhqWG0Pc0j2a7wtd9o/un6
ao0=
-----END CERTIFICATE-----